Tag Info

Hot answers tagged

2

Triying the same and on my search I found that symfony2 frameworks .htaccess file is doing that at least it is stated in the file that it would. I tried to use it in my own setup but didnt work. Maybe that will help you guys somehow. # Determine the RewriteBase automatically and set it as environment variable. # If you are using Apache aliases to do mass ...


1

I found the solution: RewriteRule ^(admin|user)($|/) - [L] RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteCond %{REQUEST_URI} !/subfolder RewriteRule ^(.*)$ index.php?q=$1 [L,QSA] Those rules will rewrite all the root folders to index.php?q=foldername. It will exclude the "admin" and "user" folders.


1

LogFormat and similar Apache and other major players in the web service space generally will allow customisation to access and error logs. The access log of "GET hostname/~username/proj/favicon.ico HTTP/1.1" is normal and working as intended, it is happening because your host is using LogFormat to output a log more to their liking. In this case its most ...


1

Method 1: Install a self signed cert You can give your site a temporary self signed SSL meaning that the site can be accessed via HTTPS and then redirected to HTTP because the site becomes accessible with a self signed, however with a self signed certification peoples browsers are going to first warn about the SSL certification. This warning is unavoidable ...


1

Can anyone tell me why the following code isn't working? By "not working", I assume it is blocking everyone, including yourself? You need to remove the deny from all directive from that code block. This is overriding your allow from... line. All requests which don't match your IP address are implicitly deny'd, because of the Order directive. The ...


1

Please check to see if your server is faulting because of maxed entry processes (or subsiquent virtual memory limit). This means that too many people are requesting and scripts aren't fast enough to catch up, or scripts are still running (held) for another user. By opening more entry processes or vram, this may resolve a 500/502/503/504. Normally, economy ...


1

Simply put, these are hackers trying to exploit a specific PHP application install which you do not have. Which application? I would have to research this and it would take too much time to figure it out. But does it really matter which application? No. This is quite common and you should keep an eye on your access logs to controls these behaviors. You will ...


1

Depending on what Apache version your WAMP is using, you may need to replace these directives in your regular virtual host settings: Order allow,deny Allow from all with Require all granted Please see more about upgrading form Apache 2.2 to Apache 2.4 here.


1

Specifying /sbin/nologin as the login shell for the Apache user does not prevent Apache from launching bash. It only prevents logins with the user that is meant to only run the webserver. You might be interested in How do I secure Apache against the Bash Shellshock vulnerability? from the security StackExchange site. It suggests some workarounds like ...


1

Although im not "official source", I've experimented in this case of using a period and treating .error_log (or .error.log) like a file extension. In the case you were viewing them in some sort of "GUI" this would allow you to sort by extension more easily. Also this may lean towards dis-allowing the _ in error_log from becoming a space in some tools. As ...



Only top voted, non community-wiki answers of a minimum length are eligible